Oracle WebCenter Portal vulnerabilities

Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.8.0 allows remote attackers to affect confidentiality via unknown vectors related to Portlet Services.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools) allows an unauthenticated attacker with network access via HTTP to compromise the system. The attack is easily exploitable and requires no user interaction.

Vulnerability in Oracle WebCenter Portal (component: Composer) allows a low-privileged attacker via HTTP to take over the portal. The attack may impact other products (scope change). CVSS score 9.9.

Vulnerability in Oracle WebCenter Portal (component: Portlet Services) allows an unauthenticated attacker via HTTP to gain unauthorized data access and cause hangs or frequent crashes (DoS). CVSS score 9.1.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by a low privileged attacker with network access via HTTP. Attacks may impact additional products (scope change). Successful attack can lead to full system takeover.

Vulnerability in Oracle WebCenter Portal (Runtime Tools component) allows unauthenticated attacker via HTTP to take over the system. CVSS 9.8.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can compromise the portal, potentially impacting other products.

Vulnerability in Oracle WebCenter Portal (Runtime Tools component) allows a low-privileged attacker via HTTP to gain unauthorized access to critical data and modify it. The attack may affect other products (scope change).

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by a low privileged attacker with network access via HTTP. Attacks may impact additional products (scope change). Successful attack can lead to full system takeover.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can compromise the portal, potentially impacting other products.

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTPS to compromise the portal. Attacks may also significantly impact additional products.

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the portal. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows unauthenticated attacker to gain unauthorized access to critical data, with potential impact on other products.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows unauthenticated attacker to take over the portal.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows unauthenticated attacker to gain unauthorized access to critical data, with potential impact on other products.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, requires user interaction, allows low-privileged attacker to gain unauthorized access to critical data and modify some data.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, requires user interaction, allows unauthenticated attacker to gain unauthorized access to critical data and modify some data.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, requires user interaction, allows low-privileged attacker to perform unauthorized creation, deletion, or modification of data and access critical data.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, requires user interaction, allows low-privileged attacker to perform unauthorized creation, deletion, or modification of data and access critical data.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker can compromise the portal over HTTP. Easily exploitable, CVSS score 8.8.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker can compromise the portal over HTTP, but exploitation is difficult. Attacks may impact additional products (scope change). CVSS 8.5.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker can gain unauthorized access to critical data, modify some data, and cause partial denial of service. CVSS 7.6.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools) affects version 14.1.2.0.0. A low-privileged attacker can gain unauthorized access to critical data or all portal data over HTTP. Attacks may impact additional products. CVSS 7.7.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools) affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can gain unauthorized access to critical data and modify, delete, or create data over HTTP (difficult to exploit). Attacks may impact additional products. CVSS 8.7.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker can gain unauthorized access to critical data and modify, delete, or create data over HTTP. CVSS 8.1.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools) affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can gain unauthorized access to critical data, modify it, and cause partial denial of service over HTTP, requiring user interaction. CVSS 7.1.

Vulnerability in Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows low privileged attacker via HTTP to gain unauthorized access to data (creation, deletion, modification), partial read access, and cause partial denial of service. Attack may impact other products (scope change).

Vulnerability in Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows low privileged attacker via RMI to take over Oracle WebCenter Portal.

Vulnerability in Oracle WebCenter Portal (component: Composer) in versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker can remotely compromise the system via HTTP. Successful attacks can result in takeover of Oracle WebCenter Portal.